Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: o5pyNHjigRe6tDUa95cbiSjt5lOLdakOns/tuvC3jsI=
Subject key identifier: 97:C0:1E:69:8A:6F:FB:2E:DD:B7:15:58:58:3D:9C:8F:B3:4C:79:77
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 019D37895CD773C4D974C74E3841D57F28AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 075C
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: Ivg6snMydNXdySu3QX12mNo28u8.roa (hash: j9c4g1fOAHiMBPWaG5AigoutzfZxb4EuhkBYBF49VwY=)
2: i69vJEQPkDcWZtUI4FCC2gJOc0U.roa (hash: D7g5fdfmMlJvg4w+bYuZp2xJXQeTRhu8e3EybLceqmw=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: wE9MYxOls/3JkETuEZS8FmpcfwzekA4kdRzfUmCD2KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5c:d7:73:c4:d9:74:c7:4e:38:41:d5:7f:28:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=97c01e698a6ffb2eddb71558583d9c8fb34c7977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:72:6b:57:6a:db:41:f4:0b:1f:f3:b4:33:
7e:09:c6:47:b9:fa:99:ef:20:63:1d:13:b6:ce:25:
8d:a2:43:bd:94:da:67:56:30:37:7f:83:d1:61:34:
7f:c5:c7:52:ef:9b:39:58:04:76:61:b2:1c:bb:d2:
f7:60:c3:42:7a:de:07:9a:3b:3d:aa:11:71:56:01:
72:cc:c0:8c:c2:4a:8f:79:2f:bf:ad:6e:5d:3a:6c:
c6:91:00:bb:1c:3d:0c:71:5a:59:15:a6:ce:b0:05:
68:27:92:b2:93:c8:84:29:3c:cf:95:f7:c0:8a:14:
c3:59:18:6d:b1:ad:90:b2:28:c2:d4:d5:ea:3d:17:
12:96:4a:9a:46:b2:ae:53:99:2a:1b:e0:ce:14:65:
1e:68:6c:b2:34:fa:9b:84:af:89:1a:49:be:ce:32:
e8:f4:34:b3:bf:9c:22:83:08:bd:70:62:19:aa:bb:
cc:19:eb:af:72:8c:bd:51:ec:b2:f1:f7:09:de:2d:
22:da:16:61:cf:72:c5:3a:50:26:90:39:ce:8d:41:
9a:87:41:cb:89:73:65:15:ff:b8:22:0b:8e:4f:d9:
1a:16:90:99:4a:fd:ba:ce:7c:28:e5:77:2e:04:18:
20:8c:c1:bb:e4:df:b7:3a:f3:2e:9b:68:72:0e:69:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:1E:69:8A:6F:FB:2E:DD:B7:15:58:58:3D:9C:8F:B3:4C:79:77
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:16:1e:68:1d:d5:9e:dc:e9:9e:f4:3b:4d:da:73:46:7f:0e:
9e:64:6c:f5:b2:4c:de:3d:e5:8f:23:14:79:18:7c:c2:63:25:
0f:f2:e1:77:b3:d5:e6:f9:9b:a8:69:5b:eb:03:b0:75:0b:90:
a1:25:b5:4d:74:77:bc:19:b4:4c:06:0f:1a:8f:60:e8:30:ce:
09:1e:1d:e8:85:a6:3d:56:de:0c:0f:d3:d3:ee:b8:c0:1e:93:
77:18:d3:0e:a1:2d:d1:a5:85:59:6d:62:1a:d8:2f:df:46:74:
6d:e7:8e:66:44:c0:66:9e:d8:ff:a8:be:11:fb:e5:88:e8:07:
97:83:9d:a0:6b:3a:6d:b5:73:19:a5:e4:fe:61:e7:67:35:ae:
0c:28:65:70:eb:dd:78:72:c2:5c:2d:b5:b2:7d:68:9d:e7:05:
d7:03:6f:02:21:66:f3:fe:de:16:02:7c:e2:88:ab:ec:38:a0:
45:b7:fc:51:e7:2b:61:e3:6f:9f:e0:98:92:dd:a8:63:78:48:
45:1c:c6:1b:35:30:8c:e4:41:41:b4:ae:42:62:76:64:2f:72:
b5:dc:51:e3:42:7a:e8:96:4c:8a:fd:42:45:82:67:e3:67:f7:
a4:cc:81:53:ba:59:1a:0d:3e:3c:1a:02:46:7c:77:b7:07:d7:
60:4f:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:20 2026 by rpki-client